ulfm: prepping to setup ulfm

machines/galatea.nix

@@ -22,15 +22,21 @@ let
   feck = "d9J4jDsJPuMPUMAAE4J4tH37HsmxEDze";
 in {
   imports = [
-    # applications for this particular server
+    # general stuff for config
     ../applications/firewall.nix
     ../applications/dns.nix
+    # web stuff
+    ../applications/nginx.nix
+    #../applications/acme.nix
+    # specific to tis server
   ];
 
   deployment = {
     targetHost = hostname;
     targetPort = 22;
     targetUser = "root";
+
+    tags = [ "active" ];
   };
 
   # these two are to be able to add the rules for firewall and dns
@@ -47,27 +53,18 @@ in {
     ];
     cname = [
       # this is also the stream server
-      "stream           CNAME   ${name}"
+      #"stream           CNAME   ${name}"
+      "ulfm             CNAME   ${name}"
     ];
   };
 
-  networking.firewall.allowedTCPPorts = [
-    22
-    80
-    443
-    8000
-  ];
+  networking.firewall.allowedTCPPorts = [ 8000 ];
 
-  # config for icecast is smol so can have it in this
-  services.icecast = {
-    enable = true;
-    hostname = hostname;
-
-    admin = {
-      user = "admin";
-      password = feck;
+  services = {
+    nginx.virtualHosts."ulfm.skynet.ie" = {
+      #forceSSL = true;
+      #useACMEHost = "skynet";
+    #  locations."/gw2".proxyPass = "http://localhost:8085";
     };
-
   };
-
 }